feat: Add guild charters and task boards for various components

- Introduced guild charters for Scanner Deno, PHP, Ruby, Native, WebService, Java, Surface.Env, Surface.FS, Surface.Secrets, Surface.Validation, UI, Zastava Observer, Zastava Webhook, Zastava Core, and Plugin Platform.
- Each charter outlines the mission, scope, required reading, and working agreements for the respective guilds.
- Created task boards for Surface.Env, Surface.FS, Surface.Secrets, Surface.Validation, and Zastava components to track progress and dependencies.
- Ensured all documents emphasize determinism, offline readiness, security, and integration with shared Surface libraries.

src/Concelier/__Libraries/StellaOps.Concelier.Normalization/AGENTS.md

@@ -0,0 +1,27 @@
+# Concelier Normalization Guild Charter
+
+## Mission
+Maintain helper utilities that normalise upstream advisory payloads into Concelier’s immutable observation/linkset structures while respecting the Aggregation-Only Contract. The goal is to provide consistent field extraction and canonicalisation without introducing derived data or losing provenance.
+
+## Scope
+- Shared normalization helpers in `StellaOps.Concelier.Normalization`.
+- Field mappers (identifiers, products, references) reused by connectors.
+- Canonical JSON serialization rules (sorting, formatting, timestamp normalisation).
+- Schema evolution helpers tied to `advisory_raw` / `linkset` documents.
+
+## Required Reading
+- `docs/modules/concelier/architecture.md`
+- `docs/ingestion/aggregation-only-contract.md`
+- `docs/modules/concelier/operations/conflict-resolution.md`
+- `docs/modules/concelier/operations/connectors/*` (to understand per-source nuances)
+- `docs/modules/concelier/design/` materials if referenced by tasks.
+
+## Working Agreement
+1. **Synchronise status** in both `docs/implplan/SPRINTS.md` and `TASKS.md` when starting/finishing tasks.
+2. **AOC compliance**: avoid adding severity, consensus, fix hints, or other derived fields—output raw upstream data plus provenance.
+3. **Deterministic outputs**: enforce stable ordering (sorted arrays/objects), UTC timestamps, lowercase enum values as documented.
+4. **Shared API stability**: version helpers when breaking changes are needed; communicate with connector guilds.
+5. **Testing**: extend golden fixtures & property tests to catch regressions; ensure CI covers multi-source scenarios.
+6. **Documentation**: update developer notes (add/refresh doc under `docs/modules/concelier`) when normalization contracts change.
+
+- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.